Abstract
Computer security incident response teams (CSIRTs) are critical to maintaining business continuity in the face of cyber-attacks. Yet there has been little research conducted in the last decade to understand the root causes of the challenges they face to sustain their effectiveness. Moreover, they operate in complex sociotechnical multiteam systems, making it challenging to understand the causes of problems and how to bring about improvements. This paper
proposes the use of a Systemic Design approach to develop a more in-depth understanding of the complex sociotechnical system(s) of cyber security incident response, in order to find intervention points that can be leveraged in one area to transition the whole system into a better state. We present the first steps of a case study that uses Gigamap workshops and in-depth interviews with a range of
stakeholders to frame the system and understand its effectiveness.
proposes the use of a Systemic Design approach to develop a more in-depth understanding of the complex sociotechnical system(s) of cyber security incident response, in order to find intervention points that can be leveraged in one area to transition the whole system into a better state. We present the first steps of a case study that uses Gigamap workshops and in-depth interviews with a range of
stakeholders to frame the system and understand its effectiveness.
| Original language | English |
|---|---|
| Title of host publication | 2024 New Security Paradigms Workshop, NSPW 2024 |
| Place of Publication | U. S. A. |
| Publisher | Association for Computing Machinery |
| Pages | 71-83 |
| Number of pages | 13 |
| ISBN (Print) | 9798400711282 |
| DOIs | |
| Publication status | Published - 16 Jan 2025 |
| Event | New Security Paradigms Workshop - Bedford, PA, USA, USA United States Duration: 16 Sept 2024 → 19 Sept 2024 https://www.nspw.org/2024 |
Workshop
| Workshop | New Security Paradigms Workshop |
|---|---|
| Abbreviated title | NSPW |
| Country/Territory | USA United States |
| Period | 16/09/24 → 19/09/24 |
| Internet address |
Acknowledgements
The authors would like to thank all the NSPW attendees for their insightful input into the paper during the conference. We also wish to thank the NSPW peer reviewers for their feedback as well as Dr. Karen Renaud and Dr. Nilofar Mansourzadeh for acting as the pre-event and post-event shepherds for this paper.Funding
This research work was funded by EPSRC Centre for Doctoral Training Studentship (EP/S022465/1).
Keywords
- CSIRTs
- Cyber security incident management
- Systemic Design
- Design methods
- Systems Thinking
- System Dynamics